Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65bb0bfb-03df-3e0d-81ca-25390f6635ff.roa
File:                     65bb0bfb-03df-3e0d-81ca-25390f6635ff.roa (raw, json)
Hash identifier:          HRo7u99OfNqfDGi0TzqFcFb4TPyNFFP/u1lpVf/2s1g=
Subject key identifier:   DE:39:72:01:94:53:43:8A:93:15:F7:45:CE:C2:CE:EA:07:77:A8:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1707C105963A13D7B45DDD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65bb0bfb-03df-3e0d-81ca-25390f6635ff.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     10515
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:c1:05:96:3a:13:d7:b4:5d:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=379c7fcf-da8f-413c-a33c-1369e7ea2108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:5b:39:d3:05:84:b2:f1:83:8f:b1:ba:ce:
                    6e:be:e8:ba:60:2e:41:d3:07:1f:28:27:4d:03:ad:
                    0a:08:1f:98:63:74:ed:e1:f7:3f:26:40:a0:15:a9:
                    9e:98:1e:de:8a:77:35:a4:d4:80:23:72:5f:8a:46:
                    eb:bd:8b:60:bb:f3:4a:13:2d:5c:8e:cd:8f:08:b7:
                    e3:00:f4:6c:f8:4c:a2:2a:a1:e7:6c:d3:ae:d8:ba:
                    12:95:72:f3:0c:68:1c:93:97:86:27:4f:c5:d4:57:
                    f9:7f:9e:c8:5a:b4:50:c3:20:e3:9b:ed:ea:b9:22:
                    a8:11:a5:37:7a:83:88:bf:cc:ff:db:57:88:2b:71:
                    d5:17:aa:4d:27:72:d6:cc:66:42:23:fe:d6:cd:ac:
                    16:72:94:99:76:b4:20:39:5b:cf:32:ee:bc:05:15:
                    b0:a8:d7:f8:22:b0:45:37:e5:a5:09:ba:f1:e4:02:
                    39:31:cb:92:90:63:fa:bb:4a:4a:eb:ad:00:fa:c4:
                    d7:9e:fa:6b:31:d5:61:83:bb:cb:4f:ad:7b:fb:40:
                    29:56:be:b9:9a:41:74:68:33:fe:a3:91:dd:00:da:
                    81:fd:3d:c1:bb:57:8a:12:3b:b0:6b:e3:7c:10:45:
                    63:05:73:c4:86:80:91:d3:84:c5:6e:c0:3b:0f:31:
                    31:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:39:72:01:94:53:43:8A:93:15:F7:45:CE:C2:CE:EA:07:77:A8:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65bb0bfb-03df-3e0d-81ca-25390f6635ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b7:73:22:2e:a0:7b:e7:26:35:c3:b7:e6:fd:bf:bf:8a:b2:
         5a:6c:65:8f:a7:03:d1:91:c7:16:bc:de:9a:b9:b4:4c:d3:09:
         6e:cc:eb:38:bc:88:95:b7:11:c0:2f:23:6c:ab:fd:30:e6:53:
         79:62:3a:df:80:7e:cf:93:82:0e:f8:e2:dc:b1:79:cf:c9:3d:
         22:cb:e7:b2:cf:a7:83:50:17:29:06:a1:96:72:0a:30:82:ed:
         f2:4c:d7:9c:45:e0:b4:5c:c4:dc:c3:56:83:d5:c1:e6:83:82:
         ee:0c:89:de:73:6d:86:c5:20:e0:34:60:97:7f:b0:44:c8:bb:
         04:46:3f:77:34:40:77:8a:9c:01:f3:f0:c5:a1:4a:f3:11:57:
         0e:e6:94:0b:0f:4f:94:b0:b2:9c:87:ee:ee:47:c3:22:34:50:
         d7:78:83:64:cf:85:cf:2a:09:2b:df:2a:5d:34:cb:50:24:fc:
         ee:e8:d5:95:58:39:c0:b2:cf:14:07:26:92:00:b4:f7:b6:f4:
         b4:a2:26:51:ad:98:31:85:70:5e:9f:fc:8f:5f:d3:b4:13:8a:
         69:47:e3:2e:75:29:fd:af:15:27:59:8e:16:16:16:fd:15:1a:
         a2:1f:e3:15:f1:cc:21:50:20:a1:2e:32:ef:6b:c9:4d:6d:c7:
         3a:df:70:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:24:38 2026 by rpki-client